[PRMP-1283] Update Authoriser and Endpoint Logic to Support Placeholder NHS Number Access

[steph-torres-nhs]

Overview

Jira ticket: TBC

Description

Add a check against placeholder NHS Number check in the Authoriser
Ensure custodian check in GET and PATCH DocumentReview/{id}/{version}

Context

As a Reviewer, I want to be able to access and review records associated with the placeholder NHS number (0000000000) if I am the custodian So that I can correct or process records where the patient was initially unknown without being blocked by standard NHS number scope validation.

Checklist

Tasks for all changes:

• 1. I have linked this PR to its Jira ticket.
• 2. I have run git pre-commits. (WIP)
• 3. I have added and/or updated relevant tests.
• [ ] 4. I have updated relevant documentation.
• 5. I have considered the cross-team impact (and have PR approval from both Core & Demographics if necessary).
• 6. I have successfully deployed this change to a sandbox and witnessed unit and e2e tests passing:
  • 6a. Deploy - Sandbox - workflow run main
  • 6b. SANDBOX Full- Deploy feature branch to sandbox - workflow run - TBC

[github-actions]

Code security issues found

View full details here.

[sonarqubecloud]

Quality Gate passed

Issues
1 New issue
0 Accepted issues

Measures
0 Security Hotspots
100.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud